Introduction to Authrim
Authrim is an open-source identity and access platform built for Cloudflare Workers. Applications use it to sign users in, issue and validate tokens, connect identity providers, and evaluate access policies.
What it provides
Section titled “What it provides”| Area | Examples in the implementation |
|---|---|
| Authentication and protocols | OAuth 2.0, OpenID Connect, SAML IdP/SP, passkeys, email codes, and asynchronous Device Flow/CIBA endpoints |
| Federation | External OIDC/OAuth providers, SAML federation, account linking, and configurable just-in-time provisioning |
| Authorization | RBAC, ABAC, ReBAC, token claims, and runtime policy evaluation |
| Administration | Tenant and client management, audit, consent-related records, and separate Admin and Login UIs |
| Extensions | Built-in providers and a Plugin Runner for approved capability manifests and dynamic Worker bundles |
Capabilities require the corresponding configuration and deployment. An API or extension interface being present does not mean every provider or workflow is enabled by default.
How it runs
Section titled “How it runs”ar-router sends requests to specialized Workers through Service Bindings. Durable Objects coordinate stateful protocol operations. Control manages database placement and signed routing information; Lookup locates account destinations, while Core and PII store different parts of identity data.
D1 placement is not selected through the former runtime storage profiles. Current runtime profiles cover audit and residency policy. See Architecture and PII Separation.
Deployment and ownership
Section titled “Deployment and ownership”Authrim is licensed under Apache 2.0 and has no Authrim per-user license fee. You operate the deployment in your Cloudflare account and control its source and configuration. Infrastructure, email delivery, monitoring, backups, and operational work still have costs. The current runtime depends on Cloudflare services; open source does not mean it can run unchanged on every hosting platform.
Status and evaluation
Section titled “Status and evaluation”The source is in the 0.x series. APIs, schema, and setup procedures can change between releases. Evaluate the features you intend to use and follow the release-specific installation and migration plan. Performance measurements and protocol certifications apply to their stated scenarios and versions, not every possible deployment.
Start with Quickstart, or read Identity Hub to understand account linking and policy boundaries.